Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa
File:                     34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa (raw, json)
Hash identifier:          cyCOcgKoUcqy9VvfsU4nwUVcaZ9XbKSOHIdwbeyZShk=
Subject key identifier:   69:7D:43:19:37:45:35:05:21:25:2E:2B:95:72:C8:4C:B2:15:AD:20
Certificate issuer:       /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial:       7E29D02801C1622033331F0993297249E6E8A6F3
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     269192
IP address blocks:        45.181.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:29:d0:28:01:c1:62:20:33:33:1f:09:93:29:72:49:e6:e8:a6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject: CN=697D43193745350521252E2B9572C84CB215AD20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cf:69:f0:8f:70:f8:d0:e4:78:3e:19:4c:97:
                    a7:8c:8a:5e:ab:df:11:84:86:0c:70:f1:15:c8:74:
                    79:40:b1:31:4b:97:85:d6:fa:33:88:41:92:e6:54:
                    14:51:86:10:47:70:97:9e:8d:59:82:db:66:ea:dc:
                    84:19:f8:07:1e:d5:a6:68:2a:14:8a:a6:8b:8c:be:
                    5f:08:86:69:f7:fb:1f:5e:61:5e:eb:03:c7:e0:95:
                    17:83:a6:83:5e:de:7c:b7:b1:84:a5:ab:42:92:25:
                    2d:42:d2:ce:d6:7e:53:e1:91:0d:e8:62:ea:ab:81:
                    e4:c0:82:a1:c5:de:6a:4b:dc:40:4e:4e:2c:c5:25:
                    6a:74:49:1a:7e:38:95:55:02:e5:e2:c9:e2:59:f2:
                    08:85:a9:78:bb:e4:df:d4:53:26:ee:cf:e8:bf:31:
                    65:b0:1e:6b:bc:1a:85:51:28:31:0c:6e:49:c3:b4:
                    c5:f1:b6:b8:9a:b1:e1:fc:e7:28:9a:58:2b:f5:7b:
                    92:c0:99:b7:fd:69:88:09:92:41:76:f5:a1:69:3a:
                    a2:c0:00:85:fe:cd:21:e8:40:f8:35:27:63:de:a6:
                    e0:86:39:69:85:1b:03:23:e3:fc:97:ff:ab:a4:48:
                    e0:95:9e:a5:ff:32:5d:43:90:73:14:7e:92:18:93:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7D:43:19:37:45:35:05:21:25:2E:2B:95:72:C8:4C:B2:15:AD:20
            X509v3 Authority Key Identifier:
                keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134382e302f32332d3233203d3e20323639313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:f4:58:c8:3d:ec:52:27:0f:a2:01:e0:01:08:bc:7e:42:
         ea:fb:21:33:bf:45:0c:37:82:5f:13:f5:32:79:09:85:8d:da:
         0d:a2:c9:54:e4:d1:82:36:93:a9:09:2f:56:8b:d4:82:18:36:
         98:a1:6d:a6:ff:d6:09:2f:34:46:4b:d6:44:66:68:f5:02:c1:
         3b:46:87:b8:fb:db:a4:5c:f0:26:9d:fb:12:e6:c7:d3:af:61:
         83:81:10:4e:54:ef:ea:97:cd:14:10:57:ba:d8:0c:1e:c4:3f:
         3f:8a:63:b7:29:d0:06:30:72:ae:fa:8c:58:42:27:fe:52:77:
         00:f5:ad:b0:23:ff:f5:84:f8:82:f0:c8:ad:c9:be:78:d5:98:
         0e:52:a9:ee:42:38:5c:fd:8a:86:8e:ba:c0:cc:35:48:d4:8d:
         a1:b9:f5:f8:eb:a7:48:6d:f9:5b:6f:64:04:ce:27:27:f8:48:
         9e:0e:b8:e7:1d:15:85:55:2f:a9:56:8c:e7:fe:57:93:6c:d5:
         28:2b:be:97:3f:d2:08:cd:25:97:3a:e3:f2:05:c5:40:d5:48:
         cc:04:79:38:81:3a:d8:9e:9b:6f:53:ba:c0:15:8b:e5:a2:7b:
         68:32:d5:69:3a:34:6f:e8:4a:9a:7f:bd:b6:ba:a0:d7:f3:bc:
         bd:e5:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:02:44 2025 by rpki-client